PT-2012-1286 · Websense · Websense Email Security

Published 2012-08-23 · Updated 2012-08-23 · CVE-2009-5121

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Websense Email Security version 7.1 before Hotfix 4

Description The issue allows remote attackers to bypass the sender-based blacklist. This is achieved by using the 8BITMIME EHLO keyword in the SMTP session.

Recommendations For Websense Email Security version 7.1 before Hotfix 4, apply Hotfix 4 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-5121

Affected Products

Websense Email Security

References · 2

• http://websense.com/support/article/t-kbarticle/Hotfix-4-for-Websense-Email-Security-v7-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-5121 · Security Note